This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C99C83624A3C8DC01D91F37B50FF72ABC656E59F605BBF6061B7AD7349F02FB/0/3230302e36332e39362e302f32312d3234203d3e20323635383331.roa
File:                     3230302e36332e39362e302f32312d3234203d3e20323635383331.roa (raw, json)
Hash identifier:          PF1z6G8Bt3rSjkXjSgqqpC3n2PXFF2jzO75AZ+7dvBk=
Subject key identifier:   21:97:B9:2E:8D:80:D7:5E:4A:57:B8:8C:D5:69:77:A7:28:D9:5D:E9
Certificate issuer:       /CN=02E31D06146FCD6AE4D718DA467E60060D036810
Certificate serial:       06F0D712428EFD05C49BEAA09A165DD9D892EA32
Authority key identifier: 02:E3:1D:06:14:6F:CD:6A:E4:D7:18:DA:46:7E:60:06:0D:03:68:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02E31D06146FCD6AE4D718DA467E60060D036810.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C99C83624A3C8DC01D91F37B50FF72ABC656E59F605BBF6061B7AD7349F02FB/0/3230302e36332e39362e302f32312d3234203d3e20323635383331.roa
Signing time:             Tue 06 Jan 2026 19:47:36 +0000
ROA not before:           Tue 06 Jan 2026 19:42:36 +0000
ROA not after:            Tue 05 Jan 2027 19:47:36 +0000
asID:                     265831
IP address blocks:        200.63.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C99C83624A3C8DC01D91F37B50FF72ABC656E59F605BBF6061B7AD7349F02FB/0/02E31D06146FCD6AE4D718DA467E60060D036810.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C99C83624A3C8DC01D91F37B50FF72ABC656E59F605BBF6061B7AD7349F02FB/0/02E31D06146FCD6AE4D718DA467E60060D036810.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02E31D06146FCD6AE4D718DA467E60060D036810.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f0:d7:12:42:8e:fd:05:c4:9b:ea:a0:9a:16:5d:d9:d8:92:ea:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02E31D06146FCD6AE4D718DA467E60060D036810
        Validity
            Not Before: Jan  6 19:42:36 2026 GMT
            Not After : Jan  5 19:47:36 2027 GMT
        Subject: CN=2197B92E8D80D75E4A57B88CD56977A728D95DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:25:82:5d:5b:8d:b3:68:39:8c:cc:e9:30:
                    b0:f9:be:e2:d6:7b:49:b1:8b:cf:28:5a:e9:92:99:
                    f7:6c:80:a6:3f:09:d6:d6:3b:16:34:aa:be:7e:b1:
                    10:9c:d6:9e:f8:61:62:25:1a:98:24:0c:4f:68:3f:
                    7a:a6:25:77:91:9d:70:ab:a5:3b:ba:b9:a1:3e:37:
                    11:f9:96:8e:0c:ac:6b:67:eb:d0:30:f7:16:d0:98:
                    ec:0a:52:82:fa:79:6b:60:cc:e6:16:63:a8:94:23:
                    be:e5:45:a8:f9:e9:3f:02:61:54:c1:bf:df:24:5e:
                    3b:fa:56:b9:70:8a:2a:a2:20:f2:59:3c:0f:61:b4:
                    b6:b4:0a:c5:78:a4:a2:00:4e:9f:59:b9:b3:27:ef:
                    33:f2:8b:34:9a:ff:88:3f:6b:76:f8:93:c3:d2:11:
                    f8:7e:c0:37:a4:9e:7c:c2:c9:17:38:bc:0b:ac:80:
                    c6:75:d1:96:5d:8d:11:f3:b5:73:c5:8e:0b:27:43:
                    80:de:ba:e8:6a:57:6d:d5:95:d4:96:00:0c:67:9b:
                    a4:40:ac:2a:16:48:2e:8b:99:6c:3b:d9:17:82:e0:
                    3d:8b:1d:51:83:7e:75:fe:32:3c:fd:0e:07:3d:91:
                    77:d7:06:0b:45:e0:45:9e:a9:b2:c0:39:94:17:6f:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:97:B9:2E:8D:80:D7:5E:4A:57:B8:8C:D5:69:77:A7:28:D9:5D:E9
            X509v3 Authority Key Identifier:
                keyid:02:E3:1D:06:14:6F:CD:6A:E4:D7:18:DA:46:7E:60:06:0D:03:68:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C99C83624A3C8DC01D91F37B50FF72ABC656E59F605BBF6061B7AD7349F02FB/0/02E31D06146FCD6AE4D718DA467E60060D036810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02E31D06146FCD6AE4D718DA467E60060D036810.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C99C83624A3C8DC01D91F37B50FF72ABC656E59F605BBF6061B7AD7349F02FB/0/3230302e36332e39362e302f32312d3234203d3e20323635383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:3e:d1:8b:37:21:97:0b:9e:68:c4:c1:b8:09:ad:6b:79:f9:
         ae:5e:89:11:21:86:6f:3e:8f:58:58:d4:43:68:50:07:7b:5f:
         4c:4f:50:e0:55:fd:f3:5a:1c:02:42:85:f0:ca:27:6f:bd:cc:
         d2:e6:7f:8d:09:39:72:25:05:e4:31:e5:40:e4:31:25:9e:df:
         18:de:be:4b:a1:a8:83:34:95:10:3d:5d:b8:35:1d:c4:b6:72:
         8f:cd:29:8f:ac:68:45:de:ac:a4:94:d4:46:84:71:5b:91:c3:
         5c:60:48:c8:5a:92:f0:35:90:d9:77:36:81:b9:26:52:35:1a:
         77:58:72:be:3a:a5:1b:a4:b2:b1:6f:a9:6e:8a:5c:4c:2a:71:
         a7:56:88:0a:45:3b:3e:ec:03:83:ab:eb:42:99:4a:8b:60:1b:
         55:23:28:ab:a9:13:56:d8:8e:16:86:5c:e6:83:6c:e1:73:31:
         44:02:15:aa:6d:66:a5:34:b8:08:c1:ab:7f:1a:ce:0c:b0:8d:
         84:99:9d:5a:2e:f3:31:66:48:40:97:ff:6c:f2:c7:de:ac:cf:
         0c:3a:0f:d7:ee:e0:e8:47:36:84:84:57:4f:14:27:03:09:44:
         b9:6d:92:67:61:51:e3:ee:e7:91:30:49:10:74:35:1c:50:c6:
         1a:a4:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:05 2026 by rpki-client